SANS Institute – With several readily available Linux and open source options, you can create a combined intrusion detection system and firewall out of commodity hardware. Read on to find out how it's done. (Article is in PDF format.)